diff --git a/atomics/T1552.007/T1552.007.yaml b/atomics/T1552.007/T1552.007.yaml index c52c1078..34c4d88c 100644 --- a/atomics/T1552.007/T1552.007.yaml +++ b/atomics/T1552.007/T1552.007.yaml @@ -6,8 +6,7 @@ atomic_tests: description: | A Kubernetes secret is an object that lets users store and manage sensitive information, such as passwords and connection strings in the cluster. Secrets can be consumed by reference in the pod configuration. Attackers who have permissions to retrieve the secrets from the API server (by using the pod service account, for example) can access sensitive information that might include credentials to various services. supported_platforms: - - macos - - linux + - containers input_arguments: namespace: description: K8s namespace to list @@ -22,7 +21,7 @@ atomic_tests: elevation_required: false - name: Cat the contents of a Kubernetes service account token file - auto_generated_guid: 788e0019-a483-45da-bcfe-96353d46820f + auto_generated_guid: 788e0019-a483-45da-bcfe-96353d46820f description: | Access the Kubernetes service account access token stored within a container in a cluster. @@ -76,4 +75,4 @@ atomic_tests: kubectl --context kind-atomic-cluster exec atomic-pod -- cat /run/secrets/kubernetes.io/serviceaccount/token name: sh cleanup_command: | - kubectl --context kind-atomic-cluster delete pod atomic-pod \ No newline at end of file + kubectl --context kind-atomic-cluster delete pod atomic-pod